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TITLE OF THE INVENTION 

CONTENT USE MANAGEMENT SYSTEM, CONTENT USE MANAGEMENT 
METHOD, AND CLIENT DEVICE 

5 BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

The present invention relates to a content usage management 
system which comprises a server for distributing a digital content 
such as video and music data and a client apparatus, a content 
10 usage management method and a client apparatus. 

(2) Description of the Prior Art 

In a content distribution system via a network, a content to be 
distributed is encrypted and the encrypted content and a decryption 

15 key for the encrypted content (hereafter referred to as content key) 
is distributed to a user terminal. 

As for a distribution method of a content key, two types of 
distribution methods exist: a unicast distribution which distributes a 
content key one on one to only a client apparatus that requests the 

20 content use; and a multicast distribution which distributes a content 
key to all client apparatuses at once even when they do not request 
the content use. In a conventional content distribution system, a 
content key is distributed by the same distribution method 
regardless of the types of contents. 

25 The above description is disclosed in a patent literature, 

Japanese Laid-Open application No. 11-312175. 

However, the number of clients to which a content key is 
distributed differs depending on contents. If the number of client 
apparatuses which use the content is large, the multicast 

30 distribution reduces processing loads on a server than the unicast 
distribution since the unicast distribution distributes a content key 
after communicating with each client apparatus. On the other hand, 



the unicast distribution can ensure higher security than the 
multicast distribution to protect copyrights since the unicast 
distribution can keep in a log information about which content keys 
were sent to which client apparatuses. In the conventional 
5 technologies, even if sending a content key by using the multicast 
distribution can reduce the processing load on a server depending 
on contents, the method which puts more processing loads on a 
server is actually used to distribute a content key because a content 
key is distributed by either one of the distribution methods 
10 regardless of content types. It is also distributed by the method 
which provides lower security even if higher security is desired 
depending on contents. 

SUMMARY OF THE INVENTION 

15 Examining the above mentioned problems, the present 

invention aims to provide a content usage management system 
capable of distributing a content decryption key, the system 
selectively reducing processing loads in the system or securing 
security. 

20 The content usage management system according to the 

present invention is a content usage management system for 
distributing, via a network, usage control data for controlling a 
content use in a client apparatus, comprising: one or more 
distribution servers for distributing the usage control data to the 

25 client apparatus by a plurality of different distribution methods; and 
a distribution management server for determining a distribution 
method out of the plurality of distribution methods for distributing 
usage control data of each content according to attributes of said 
each content, wherein one of the distribution servers distributes the 

30 usage control data by the determined distribution method. 

As above described, according to the present invention, the 
content usage management system comprises a distribution server 
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for distributing the usage control data by the plurality of different 
distribution methods, and is allowed to distribute the usage control 
data by the most appropriate distribution method from the 
standpoint of concerning processing loads on the distribution server 
5 and ensuring security by switching a distribution method for the 
usage control data depending on content. 

The attributes of said each content include a compression 
format of said each content, and the distribution management 
server may determine the distribution method for the usage control 

10 data according to the compression format of said each content. 

The attributes of said each content include information to 
identify a content provider that provides said each content, and the 
distribution management server may determine the distribution 
method for the usage control data according to the content provider 

15 of said each content. 

The attributes of said each content include a compression 
ratio of said each content, and the distribution management server 
may determine the distribution method for the usage control data 
according to the compression ratio of said each content. 

20 The attributes of said each content include a use condition of 

said each content, and the distribution management server may 
determine the distribution method for the usage control data 
according to the use condition of said each content. 

Each of said one or more distribution servers may include at 

25 least one of the following units: a unicast distribution unit operable 
to distribute the usage control data by a unicast distribution method 
for distributing data in response to a request from the client 
apparatus; and a multicast distribution unit operable to distribute 
the usage control data by a multicast distribution method for 

30 distributing data all at once to a plurality of client apparatuses at a 
predetermined distribution time. 

The distribution management server may include: a 
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distribution method determination rule holding unit operable to hold 
a distribution method determination rule indicating a rule to 
determine the distribution method; and a distribution method 
determination unit operable to determine the distribution method 
5 according to the distribution method determination rule, with 
reference to the distribution method determination rule 
corresponding to the attributes of said each content. 

Each of the distribution servers including the unicast 
distribution unit may further include an authentication unit to 

10 authenticate the client apparatus as an authorized user when the 
client apparatus is recognized as a previously registered client 
apparatus through communication with each client apparatus, 
wherein the unicast distribution unit may distribute the usage 
control data only to the client apparatus recognized as an authorized 

15 user. 

The usage control data include a decryption key to decrypt an 
encrypted content, and the client apparatus may include: a usage 
control data obtainment unit operable to obtain the usage control 
data corresponding to said each content from any one of the 

20 distribution servers; a decryption unit operable to extract the 
decryption key from the obtained usage control data and decrypt the 
content corresponding to the usage control data using the extracted 
decryption key; and a reproduction unit operable to reproduce the 
decrypted content. 

25 The usage control data further include a use condition for 

using content, and the client apparatus may further include a 
reproduction control unit operable to extract the use condition from 
the obtained usage control data and control the reproduction unit to 
perform the reproduction within an extent to which the extracted 

30 use condition is satisfied. 

Further, the content usage management method according to 
the present invention is a content usage management method for a 
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server to distribute, via a network, usage control data for controlling 
a content use in a client apparatus, comprising: a distribution 
method determination step of determining a distribution method for 
distributing the usage control data of each content according to 
5 attributes of said each content; and a distribution step of 
distributing the usage control data by the determined distribution 
method out of the plurality of different distribution methods. 

In the content usage management method, a distribution 
method determination rule indicating a rule of determining the 

10 distribution method is previously held, and in the distribution 
method determination step, the distribution method may be 
determined according to the distribution method determination rule, 
with reference to the distribution method determination rule 
corresponding to the attributes of said each content. 

15 A client apparatus according to the present invention is a 

client apparatus in a content usage management system for 
distributing, via a network, usage control data for controlling a 
content use in the client apparatus by one of a plurality of different 
distribution methods, comprising: a content request unit operable to 

20 request a content server which distributes content to distribute the 
content and obtain the content; a distribution method judgement 
unit operable to judge a distribution method for the usage control 
data corresponding to the requested content, according to success 
or failure of the obtainment of the content distributed from the 

25 content server; and a usage control data obtainment unit operable 
to obtain the usage control data from a distribution server that 
distributes the usage control data by the judged distribution method. 
As above described, according to the present invention, the client 
apparatus is allowed to judge a distribution method for the usage 

30 control data even when the usage control data to be distributed by 
a multicast is distributed being superimposed on the content. 
Therefore, the client apparatus can obtain the usage control data 
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without any problems and use the content even when a distribution 
method for the usage control data differs depending on the content. 

It is a client apparatus in a content usage management 
system for distributing, via a network, usage control data for 
5 controlling a content use in the client apparatus by one of a plurality 
of different distribution method. The client apparatus may 
comprise a content obtainment unit operable to obtain content 
including information indicating a distribution method for usage 
control data corresponding to said each content from a content 

10 server which distributes contents; a distribution method 
identification unit operable to extract information indicating the 
distribution method from the obtained content and identify the 
distribution method for the usage control data corresponding to said 
content based on the extracted information; and a usage control 

15 data obtainment unit operable to obtain the usage control data from 
a distribution server that distributes the usage control data by the 
identified distribution method. Accordingly, the client apparatus 
can identify a distribution method for the usage control data even 
when the information indicating the distribution for the usage 

20 control data is superimposed on the content. As a consequence, 
the client apparatus can obtain the content without any problems 
and use the content even when a distribution method for the usage 
data differs depending on the content. 

Also, it is a client apparatus in a content usage management 

25 system for distributing, via a network, usage control data for 
controlling a use of content in the client apparatus by one of a 
plurality of different distribution methods, comprising: a method 
information obtainment unit operable to obtain information 
indicating a distribution method for each usage control data from a 

30 server which determines a distribution method for the usage control 
management data; a distribution method identification unit 
operable to identify the distribution method for the usage control 



-6- 



l> < 



data corresponding to the content based on the information 
indicating the distribution method; and a usage control data 
obtainment unit operable to obtain the usage control data from a 
distribution server that distributes the usage control data by the 
5 identified distribution method. As above described, the client 
apparatus can identify a distribution method for the usage control 
data even when the information indicating the distribution method 
for the usage control data is obtained from a server which 
determines the distribution method for the usage control data. As 
10 a consequence, the client apparatus can obtain the usage control 
data without any problems and use the content even when a 
distribution method for the usage data differs depending on the 
content. 

Note that the present invention can be embodied not only as 
15 a content usage management system as described above, but also 
as a unit such as a content distribution management server which 
comprises the content usage system, a user management server, an 
encrypted content distribution server, a unicast distribution server, 
a multicast distribution server and a client apparatus, as well as 
20 embodied as a program that lets a computer for a regular use such 
as a personal computer execute the distinctive motions. And it 
should be note that the program can be distributed via a readable 
recording medium such as a CD-ROM and a transmission channel 
such as the Internet. 

25 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a conceptual diagram of a content distribution service 
system according to the present invention. 

FIG. 2 is a diagram showing an example of management data 
30 in a user management DB. 

FIG. 3 is a diagram showing an example of management data 
in a content holder management DB. 
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FIG. 4 is a diagram showing an example of management data 
in a content distribution method management DB. 

FIG, 5A is a diagram showing an example of a distribution 
schedule before updated held in a distribution schedule DB. 
5 FIG. 5B is a diagram showing an example of the distribution 

schedule after updated held in the distribution schedule DB. 

FIG. 6 is a diagram showing an example of management data 
in a distribution data management DB. 

FIG. 7 is a diagram showing an example of management data 
10 in an encrypted content management DB. 

FIG. 8A is a diagram showing a data structure of an encrypted 
content stored in a unicast content DB shown in FIG. 1. 

FIG. 8B is a diagram showing a data structure of the 
encrypted content stored in a multicast content DB shown in FIG. 1. 
15 FIG. 9 is a flowchart of a content registration by a content 

holder. 

FIG. 10 is a diagram showing an example of content 
metadata. 

FIG. 11 is a flowchart of a determination method of a 
20 distribution method for a content key and use conditions. 

FIG. 12A is a diagram showing an example of management 
data of a distribution method determination rule DB in the case 
where a parameter is a compression format of content. 

FIG. 12B is a diagram showing an example of the 
25 management data of the distribution method determination rule DB 
in the case where the parameter is a content holder ID. 

FIG. 12C is a diagram showing an example of the 
management data of the distribution method determination rule DB 
in the case where the parameter is an average rate of CBR and VBR. 
30 FIG. 12D is a diagram showing an example of the 

management data of the distribution method determination rule DB 
in the case where the parameter is the content use conditions. 
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FIG. 13 is a flowchart of a user registration. 
FIG. 14 is a flowchart of a content use. 

FIG. 15 is a functional block diagram showing a configuration 
of a client apparatus. 
5 FIG. 16 is a flowchart showing a reproduction process in the 

client apparatus. 

FIG. 17 is a diagram showing an example of a data structure 
of content on which information indicating the distribution method 
of the content key and the content use conditions is superimposed. 

10 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

The following describes a preferred embodiment according to 
the present invention with reference to FIG. 1 to 17. 

FIG. 1 is a conceptual diagram of a video content distribution 

15 service system according to the present embodiment. Each of 
client apparatuses 110 is connected, via a communication channel 
130 such as the Internet, to a content distribution management 
server 121, a multicast distribution server 122, a unicast 
distribution server 123, an encrypted content distribution server 

20 124, and a user management server 120. In addition, the content 
distribution management server 121 is connected, via the 
communication channel 130 such as the Internet, to the multicast 
distribution server 122, the unicast management server 123, the 
encrypted content distribution server 124, and the user 

25 management server 120. Furthermore, the multicast distribution 
server 122 and the unicast distribution server 123 are collectively 
referred to as the content key distribution server. 

The video content distribution service using the present 
system is a service to provide an environment in which 

30 pre-registered users can reproduce a video content by using the 
client apparatuses 110 via the communication channel 130 such as 
the Internet. 
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Content distributed to users is encrypted by a content holder 
and registered, once via the content distribution management 
server 121, at the multicast distribution server 122 or the encrypted 
content distribution server 124. 
5 Users obtain the encrypted content from the multicast 

distribution server 122 or the encrypted content distribution server 
124. A key to decrypt the content (hereafter referred to as content 
key) and content use conditions are distributed by either of the 
content key distribution servers; the multicast distribution server 

10 122 or the unicast distribution server 123. The content whose 
content key is distributed by the unicast distribution is registered at 
the encrypted content distribution server 124, and the content 
whose content key is distributed by the multicast distribution is 
registered at the multicast distribution server 122. 

15 The content use conditions are the restrictions for users to 

use contents, which define the number of reproduction times 
available, the validity period of reproduction, and the time duration 
of reproduction. The client apparatus 110 decrypts the obtained 
encrypted content with its content key and reproduces the content 

20 according to the content use conditions. The number of 
reproduction times available is a limit of the number of times that a 
user can use the content. The number decreases each time when 
the content is used and the content cannot be used when the 
number of reproduction times available becomes zero. The validity 

25 period of reproduction is a period of time during which the content 
can be used. The content is available for use only when it is used 
during the validity period. The time duration of reproduction is a 
remaining time during which the content is still available. It 
decreases as much as the content is used and cannot be used when 

30 the time permitted becomes zero. 

Here, the components of the present system are explained. 
The client apparatus 110 is an apparatus for a user to 
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reproduce content. Also, it has a client ID which is an identifier to 
uniquely distinguish the apparatus. The client ID is determined at 
the time of shipment from a factory and the determined client ID is 
not altered by the user after it was shipped. Furthermore, the 
5 client apparatus 110 can confirm by the client ID about the 
availability of the distribution service by the unicast distribution and 
the multicast distribution of the present system. 

The user management server 120 manages users who 
subscribe to a content distribution service using the present system. 

10 Furthermore, it has a user management database (hereafter 
referred to as "DB") 180. The user management DB 180 holds user 
IDs for uniquely distinguishing users and user names, passwords to 
authenticate users, client IDs of the client apparatuses 110 of the 
users who use such apparatuses, and the like. 

15 FIG. 2 shows an example of data held and managed at the 

user management DB 180. 

FIG. 2 shows that the user ID "User_llll" and the password 
"aaabbbccc" are assigned for the user name "User 1" and that the 
user possesses a client apparatus 110 with the client ID "123_abc." 

20 The user ID is assigned by the user management server and the user 
him/herself sets the password. 

The content distribution management server 121 has the 
functions of receiving a request for a content distribution from the 
content holder and determining a distribution method for a content 

25 key and content use conditions. Moreover, the content distribution 
management server 121 manages content holders and each content 
distribution method. The content distribution management server 
121 has a content holder management DB 140, a content 
distribution method management DB 141, and a distribution method 

30 determination rule DB 142. The content holder management DB 
140 has a content holder ID to uniquely distinguish a content holder, 
a content holder name, and a password for an authentication to hold 
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and manage information relating to a content holder which receives 
requests for the content distribution. FIG. 3 shows an example of 
data held and managed at the content holder management DB 140. 
FIG. 3 shows, for example, that the content holder ID 
5 "Holder_llll" and the password " abcrst" are assigned for the 
content holder name "C_HOLDER_l". 

The content distribution method management DB 141 holds 
and manages a content ID to uniquely distinguish the content, a 
content name, a content holder ID of a content holder which 

10 supplies the content, a content compression format, a distribution 
method of a content key and content usage conditions, reproduction 
time period of the content, data size of the encrypted content, and 
the like. FIG. 4 shows an example of data held and managed in the 
content distribution method management DB 141. 

15 FIG. 4 shows, for example, that "Mountains of the World" 

described as the content ID "CONT_0001" is a content owned by the 
content holder ID "Holder_llll" having its compression format as 
"MPEG-2", its distribution method as "the unicast method", its 
reproduction time as "60 minutes", and its data size as "1,500MB". 

20 The distribution method determination rule DB 142 holds and 

manages a rule to determine a distribution method depending on 
contents. The details about the data held and managed by the 
distribution method determination rule DB 142 are discussed later. 
The multicast distribution server 122 distributes a content 

25 key and content use conditions daily at the pre-scheduled time by IP 
multicast to a client apparatus 110 owned by a user who is managed 
at the user management server 120. The multicast distribution 
server 122 has a distribution schedule DB 150 and a multicast 
content DB 151. The distribution schedule DB 150 holds and 

30 manages time when a content key is distributed by the multicast, a 
content ID of a content by which the distributed content key can 
make the content available for its reproduction, a content key to be 
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distributed, content use conditions, and the like. The multicast 
content DB 151 stores encrypted content data of only a content of 
the content key which is distributed by the multicast distribution. 
FIGS. 5A and 5B are diagrams showing tables that describe an 
5 example of a distribution schedule held and managed at the 
distribution schedule DB 150. 

As is shown in FIG. 5A, the content of the content ID 
"CONT_0001" is encrypted with the content key "Oxaaaa...aaaa". 
The content use condition of the content ID "CONT_0001" indicates 
io limitations of "the number of reproduction times 3" where the 
content key is scheduled to be distributed at * 12: 00". In addition to 
this, the distribution schedule table describes a file path and the like 
which indicate a storage place for each content in the multicast 
content DB 151. 

15 The unicast distribution server 123 is a server which 

distributes a content key and content use conditions when there is a 
request from a user managed at the user management server 120. 
The unicast distribution server 123 has a distribution data 
management DB 160. The distribution data management DB 160 

20 holds and manages a content ID whose content can be reproduced 
by the distributed content key, a content key to be distributed, and 
content use conditions. FIG. 6 shows an example of data managed 
at the distribution data management DB 160. FIG. 6 shows that the 
content of the content ID "CONT_0001" is encrypted by the content 

25 key "Ox 1111. ..llll." The content use condition of the content ID 
"CONT_0001" indicates the limit as "the number of reproduction 
times is three times." 

The encrypted content distribution server 124 is a server for 
a user to download an encrypted content. The encrypted content 

30 distribution server 124 has an encrypted content management DB 
170 and a unicast content DB 171. The encrypted content 
management DB 170 holds and manages a file path and the like 
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where a content ID, data size of an encrypted content and encrypted 
content data are stored. The unicast content DB 171 stores the 
encrypted content data of the content whose content key is 
distributed by the unicast. FIG. 7 shows an example of data held 
5 and managed at the encrypted content management DB 170. FIG. 7 
shows that data size of the encrypted content with the content ID 
"CONT_0001" is "1,500MB", the method of content distribution is 
the unicast distribution, and the encrypted content data is stored in 
W C: ¥ content ¥ cont_0001.enc". 

10 FIG. 8A and FIG. 8B show a difference of data structures 

between an encrypted content stored in the multicast content DB 
151 and an encrypted content stored in the unicast content DB 171. 
FIG. 8A is a diagram showing a data structure of the encrypted 
content stored in the unicast content DB 171 shown in FIG. 1. FIG. 

15 8B is a diagram showing a data structure of the encrypted content 
stored in the multicast content DB 151 shown in FIG. 1. As shown 
in FIG. 8A, the content whose content key is distributed by the 
unicast is comprised of a content ID, encrypted content data, and 
the like. On the other hand, the content whose content key is 

20 distributed by the multicast, as shown in FIG. 8B, is comprised of a 
content ID, a content key, content use conditions, an encrypted 
content data, and the like. That is, the content of FIG. 8B is the 
result of superimposing a content key and content use conditions on 
the content of FIG. 8A. The data of the content key and the content 

25 use conditions shall be protected to be available only for specified 
client apparatuses 110 by using a function of limiting client 
apparatuses 110 which can use received data. Specifically, the 
content key and the content use conditions superimposed on the 
content and distributed by the multicast shall be pre-encrypted. 

30 The decryption key to decrypt the encrypted content key and the 
content use conditions is distributed only to the pre-registered users. 
The distribution methods of this decryption key includes a method 
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distributing a client apparatus 110 whose nonvolatile memory such 
as a ROM (Read Only Memory) stores a content key only to a 
pre-registered user and a method distributing a recording medium 
that recorded this decryption key to a pre-registered user. These 
5 methods allow a client apparatus of a pre-registered user to read out 
a decryption key from the ROM or a distributed recording medium 
and to decrypt a content key and content use conditions 
superimposed on a content distributed by the multicast. This client 
apparatus 110, by using this decrypted content key, decrypts an 

10 encrypted content and then can use the content according to the 
decrypted content use conditions. Note that the decryption key to 
decrypt an encrypted content key does not necessarily need to be 
distributed in a ROM and a recording medium but may be previously 
distributed by a secure communication to the registered users. 

15 This encryption method is further described in the followings; a 
non-patent literature, Nakano, et al, "Digital Content Protection Key 
Management Method."; The 2001 Symposium on Cryptography and 
Information Security, 5A-5, 2001. In addition, the method of 
allowing the use of a content key and content use conditions 

20 distributed by the multicast only to a registered user is not limited to 
the digital content protection key management method but other 
methods may be also applied. The encrypted content having the 
above data structure may be generated by the content distribution 
management server 121 and stored in the multicast content DB 151 

25 or may be generated by the multicast distribution server 122 and 
stored in the multicast content DB 151. 

A content registration terminal 100 is a terminal used by the 
content holder for registering a content distributed to the content 
distribution management server 121 by the content holder. The 

30 content registration is discussed later. 

The following explains a registration of a distributed content 
by the content holder, a determination method of a distribution 
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method, a user registration by a user and content use of a user on 
each process in the service. 

First, the registration of a distributed content by the content 
holder is explained. 
5 The content holder requests a content registration to the 

content distribution management server 121 by using the content 
registration terminal 100. FIG. 9 shows a flowchart of the content 
registration process by the content holder. 

The content distribution management server 121 

10 authenticates the content holder before it receives a registration 
request of a content to be distributed from the content holder. 
According to the present embodiment, the content holder needs to 
be registered previously at the content holder management DB 140. 
The content holder sends a content holder ID and a password to the 

15 content distribution management server 121, via the 
communication channel 130, by using the content registration 
terminal 100 when requests a registration of the content to be 
distributed. The content distribution management server 121 
judges success or failure of a login by checking a pair of the received 

20 content holder ID and a password with the data registered at the 
content holder management DB 140 (S901). 

After the login succeeded at the content distribution 
management server 121 (S902), the content holder sends a 
registration request of a content to be distributed to the content 

25 distribution management server 121 (S903). Here, the content 
holder sends an encrypted content, a content key, content use 
conditions, and content metadata. In the present embodiment, a 
compression format of the content is MPEG-2 and the content is 
encrypted using AES (Advanced Encryption Standard) with a 128-bit 

30 key. Refer to ISO/IEC 13818 for details about MPEG-2, and to 
FIPS-197 for details about AES. 

The metadata describes "a content ID" which distinguishes a 
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content uniquely, "a content name", "a content holder name", "a 
compression format" of a content, "reproduction time", and "a data 
size of an encrypted content". FIG. 10 shows an example of 
metadata. FIG. 10 describes the content name for the content of 
5 the content ID "CONT_0001" as "Mountains of the World", and the 
content holder that provided the content as 
"CONTENTHOLDER_ABC". The compression format is "MPEG-2", 
the reproduction time is "60 minutes", and the data size of the 
encrypted content is "1,500MB". Note that metadata may also 

10 include other information such as "a production year", a 
compression ratio "CBR (Constant Bit Rate) and a standard rate of 
VBR (Variable Bit Rate)". 

The content distribution management server 121 determines 
a distribution method of a content key to be registered according to 

15 the compression format in metadata received by the content 
registration request from the content holder and according to the 
distribution method determination rule DB 142 (S904). The 
determination means of a content key distribution method are 
discussed later. 

20 When the distribution method is determined as the unicast 

distribution (S905), the content distribution management server 
121 registers a content key, content use conditions, metadata, and 
content distribution conditions at the unicast distribution server 123 
(S906). In addition, the content distribution management server 

25 121 registers the encrypted content data at the encrypted content 
distribution server 124. The data shown in FIG. 6 are used as data 
held and managed at a distribution data management DB 160 of the 
unicast distribution server 123. 

When the distribution method is determined as the multicast 

30 distribution (S905), the content distribution management server 
121 registers a content key, content use conditions, metadata and 
encrypted content data at the multicast distribution server 122 



- 17- 



.3 



(5907) . The multicast distribution server 122 stores newly 
registered encrypted content data in the multicast content DB 151, 
adds a distribution schedule of a newly registered content to the 
available time on the schedule and updates the distribution schedule 

5 DB 150. 

FIGS. 5A and 5B show how the distribution schedule DB 150 is 
updated. As shown in FIG. 5A, think about the case where the 
content distribution schedule of the content with the content ID 
"CONT_0002", the content key "0 x bbbb...bbb (128-bit)", and the 

10 content use condition "reproduction times 1" is added to the 
distribution schedule DB 150 before updated. T he distribution 
schedule corresponding to "13:00" is available before the update so 
that such available time is assigned as a distribution schedule of the 
content to be added and the distribution schedule DB 150 is updated, 

15 which generates an updated condition of the distribution schedule 
DB as shown in FIG. 5B. 

The content distribution management server 121, after 
registering a content key and content use conditions at each 
distribution server following the determined distribution method, 

20 registers the encrypted content whose content key is to be 
distributed by the unicast at the content distribution server 124 

(5908) , and terminates the process. 

Next, referring to FIG. 11, the details about the process in 
determination means of a distribution method of the content key 
25 shown in S904 in FIG. 9 is explained. 

The content distribution management server 121, after 
receiving the content metadata from the content holder, determines 
a distribution method of a content key and content use conditions. 
Specifically, the content distribution management server 121 firstly 
30 obtains a content key distribution method determination rule from 
the distribution method determination rule DB 142 (S1001). 

Assuming that the number of content users changes 
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depending on a compression format of the content, a content 
compression format described in the metadata of the content serves 
as a parameter for a determination of a distribution method of a 
content key and content use conditions in the present embodiment. 
5 FIG. 12A shows an example of data (a distribution method 

determination rule) held and managed at the distribution method 
determination rule DB 142 of the present embodiment. In this rule, 
a compression format in metadata of the content to be registered is 
considered as a parameter for determining a distribution method. 

10 By using the parameter, the distribution method is determined 
according to the distribution method determination rule (S1002). 
In this case, the rule is set to select the unicast distribution if the 
compression format is MPEG-2 or AVI (Audio, Video, stilllmages), or 
the multicast distribution if the format is MPEG-4. Refer to ISO/IEC 

15 14496 for details about MPEG-4. 

The following explains other examples of data managed at the 
above-mentioned distribution method determination rule DB 142. 

FIG. 12B, assuming that there is a request to change a 
distribution method depending on a content holder, shows an 

20 example of the distribution method determination rule in the case 
where the parameter to determine a content distribution method is 
a content holder ID. The rule is set to select the unicast 
distribution if the content holder ID is "Holder_llll" or 
"Holder_3333", or the multicast distribution if the content holder ID 

25 is "Holder_2222". 

FIG. 12C, assuming that the number of users who use the 
content changes depending on picture quality of the content, shows 
an example of the distribution method determination rule in the case 
where the parameter to determine a content distribution method is 

30 set as the average rate of CBR or VBR. Here, the rule is set to select 
the multicast distribution if the average rate of CBR and VBR is less 
than 500kbps or the unicast distribution if it is over 500kbps and 



- 19- 



»1 . 



less than 15Mbps, or 15Mbps or more. 

FIG. 12D, assuming that there is a request of changing a 
distribution method according to the elapsed time since the content 
was first distributed, shows an example of the distribution method 
5 determination rule if the parameter which determines the content 
distribution method is considered as the content use conditions. 
The rule is set to select the unicast distribution if the content use 
conditions are "reproduction times 3 " and "reproduction period 
2003/01/01~2003/01/31" and the multicast distribution if the 

10 conditions are "reproduction times no limitations", or "reproduction 
period 2003/02/01~2003/02/28". 

Referring next to FIG. 13, the operation of the user 
registration is explained. 

A user previously registers at the user management server 

is 120 before using a content. More specifically, the user first 
requests his/her registration to the user management server 120 by 
using own client apparatus 110. Then the user sends his/her user 
name, a password, and a client ID of his/her client apparatus 110 to 
the user management server (S1201). While a client ID of a client 

20 apparatus 110 can be manually inputted by its user together with 
the user name and the password, it is general that the client 
apparatus 110 automatically attaches a client ID to the user name 
and the password which the user inputted and sends the resultant. 
The user management server 120 which has received a registration 

25 request of the user assigns a user ID (S1202), adds data to a user 
management DB 180 (S1203) and terminates the process after 
reporting the completion of the user registration to the client 
apparatus 110. 

Referring next to FIG. 14, the operation of a content use by a 
30 user is explained. 

The service of the content use is provided only to the 
registered users, and users are therefore required to be 
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authenticated once at the user management server 120. 
Accordingly, sending and receiving of data which is necessary for the 
authentication is performed between the client apparatus 110 and 
the user management server 120 (S1301). The client apparatus 
5 110 decides success or failure of the authentication and the 
following processes are performed only if the authentication is 
succeeded (S1302). 

A user, when they use a content, obtains information relating 
to the content, which are distributed now, from the content 

io distribution management server 121 (S1303). 

As shown in FIG. 4, information relating to a content includes 
a content ID, a content name, a content holder name which provides 
the content (or a content holder ID), a compression format, a 
distribution method of a content key, content reproduction time, and 

15 the data size of an encrypted content. The client apparatus 110 
generates a content list to request a conteint distribution and 
indicates it to its user, based on the information about the content 
obtained from the content distribution management server 121. 

The User selects a content which he/she wants to use from 

20 the content list (S1304). The client apparatus 110 sends a 
distribution request of the content selected from the content list to 
the encrypted content distribution server 124. The encrypted 
content distribution server 124 distributes an encrypted content 
only when the content key of the content requested for its 

25 distribution is distributed by the unicast. The client apparatus 110, 
when it could obtain an encrypted content from the encrypted 
content distribution server 124, judges that the distribution method 
of the content key is the unicast distribution (S1305). On the other 
hand, the client apparatus 110, if it could not obtain the encrypted 

30 content from the encrypted content distribution server 124, judges 
that the distribution method of the content key is the multicast 
distribution. 
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Following explains separately about the distribution methods 
of a content key of a selected content and content use conditions. 

The case is explained where a content key of a selected 
content and content use conditions are distributed by the multicast 
5 distribution. When the content key of the selected content is 
judged to be distributed by the unicast distribution, the client 
apparatus 110 further examines whether the content key of the 
selected content is held inside the client apparatus 110 (S1306). 
When the client apparatus 110 holds the content key of the selected 

io content already, the content is reproduced by the client apparatus 
110 using the content key held by the client apparatus 110 (S1311). 
When the client apparatus 110 does not hold the content key of the 
selected content, authentication is conducted between the client 
apparatus 110 of a user and the unicast distribution server 124, and 

15 a communication ensuring confidentiality and anti-falsification is 
carried out (S1307). While the present embodiment does not 
particularly describe a system of such communication method, SSL 
(Secure Sockets Layer) and the like is used. SSL is referred to A. 
Frier, et al. "The SSL 3.0 Protocol", Netscape Communications Corp., 

20 18 Nov. 1996. Note that the authentication between the client 
apparatus 110 and the unicast distribution server 123 may be 
substituted by authentication by a PKI method or by a common key 
method. Through the above-mentioned communication, the client 
apparatus 110 obtains the content key and content use conditions 

25 from the unicast distribution server 123 (S1308). At the step 
S1307, if the authentication with the unicast distribution server 123 
is failed, the client apparatus 110 terminates the process. 

The case is explained where a content key of a selected 
content and content use conditions are distributed by the multicast 

30 distribution. When the content key of the selected content is 
judged to be distributed by the multicast distribution, the client 
apparatus 110 examines whether the client apparatus 110 holds the 
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content key of the selected content inside the client apparatus 110 
(S1309). When the client apparatus holds the content key of the 
selected content already, the content is reproduced by the client 
apparatus 110 using the content key held by the client apparatus 
5 110 (S1311). When the client apparatus 110 does not hold the 
content key of the selected content, the client apparatus 110 
receives the content key from the multicast distribution server 122. 
In the multicast distribution, the multicast distribution server 122 
distributes content, a content key, and content use conditions by the 

10 multicast based on a previously set distribution schedule. Since 
the client apparatus 110 does not hold the content key and content 
use conditions inside the client apparatus 110, the client apparatus 
110 waits until the next multicast distribution (S1310). The client 
apparatus 110 can obtain a schedule of the multicast distribution 

15 from the multicast distribution server 122. The distribution 
method by the multicast of the present embodiment is implemented 
by the distribution method with a function of limiting the number of 
client apparatuses 110 that can use received data, because it is 
needed to be distributed only to the client apparatuses 110 used by 

20 users who are managed at the user management server 120. The 
specific implementation method is referred to Nakano, et al, "Digital 
Content Protection Key Management Method."; The 2001 
Symposium on Cryptography and Information Security, 5A-5, 2001. 
Reproduction is performed inside the client apparatus 110, 

25 after content, a content key, and content use conditions are 
obtained in each of the above-mentioned distribution processes 
(S1311). 

Referring next to FIG. 15 and FIG. 16, the detail about the 
reproduction process inside the client apparatus 110 at the step 
30 S1311 in FIG. 14 is explained. FIG. 15 is a functional block diagram 
showing a configuration of the client apparatus 110. FIG. 16 is a 
flowchart showing the operation of the content reproduction process 
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inside the client apparatus 110 at the step S1311 in FIG. 14. 

The client apparatus 110 has a communication unit 1401, a 
use conditions judgement unit 1402, an encrypted content storage 
unit 1403, a content decryption unit 1404, a content decode unit 
5 1405, a client ID storage unit 1406, a content key storage unit 1407, 
an input unit 1408, a request processing unit 1409, a distribution 
method determination unit 1410, and a screen output unit 1411. 

The communication unit 1401 is a function processing unit to 
communicate with all kinds of servers. The use conditions 

10 assessment unit 1402 is a function processing unit to judge whether 
new use of a content meets the content use conditions. The 
encrypted content storage unit 1403 is a memory unit and a function 
processing unit which stores the encrypted content. The encrypted 
content obtained at the step S1305 and the step S1308 in FIG. 14 is 

15 stored in the encrypted content storage unit 1403. The content 
decryption unit 1404 is a function processing unit which decrypts 
the encrypted content using a content key. 

The content decode unit 1405 is a function processing unit 
which decodes a content according to a content compression format 

20 and outputs video and audio data. The client ID storage unit 1406 
is a memory unit and function processing unit where stores a client 
ID, and the communication unit 1401 obtains the client ID from here 
when a distribution of a client ID is needed in the communication 
with a server. The content key storage unit 1407 is a memory unit 

25 and function processing unit which stores a content key and content 
use conditions. The content key and content use conditions 
obtained at the step S1308 in FIG. 14 are stored in the content key 
storage unit 1407. The input unit 1408 is a function processing unit 
which inputs a request from the user. The request processing unit 

30 1409 is a function processing unit which performs a process 
according to a request inputted by the input unit 1408. The 
distribution method determination unit 1410 determines whether 
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the content key of the content selected by the user is distributed by 
the multicast distribution or by the unicast distribution. The screen 
output unit 1411 is a function processing unit which renders video to 
be reproduced and information from a server and presents them to 
5 the user. 

The client apparatus 110 after obtaining a content key and 
content use conditions stored in the content key storage unit 1407 
confirms at the use conditions judgement unit 1402 whether the 
new use of a content at the present time meets the conditions 

10 described in obtained content use conditions (S1501). For example, 
there are confirmations such as whether the number of reproduction 
times is not zero and whether the present time is within the 
available reproduction date and time. When the content use 
conditions are satisfied, the use conditions processing unit 1402 

15 sends the content key stored in the content key storage unit 1407 
(S1501). The content decryption key unit 1404 obtains the 
encrypted content from the encrypted content storage unit 1403 and 
decrypts it by the content key obtained from the use conditions 
judgement unit 1402 (S1502). The decrypted data is then sent to 

20 the content decode unit 1405. The content decode unit 1405 
decodes the content according to its compression format, outputs 
the video and audio data (S1503) and terminates the process. 

As mentioned above, according to the content distribution 
system 200 in the present embodiment, the distributors of content 

25 and a content key can distribute them by switching between the two 
distribution methods of a content key and content use conditions 
according to the attribute of each content. Accordingly, for 
example, when it is expected that there is a deluge of requests for 
distributing a content key and content use conditions of the same 

30 content, its content key and content use conditions are distributed 
by the multicast so that the processing load on the servers within 
the content distribution system 200 may be reduced. Further, 
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when the copyright protection of content is prioritized to the 
processing load on the servers in the content distribution system 
200, the content key and content use conditions are distributed by 
the unicast so that a security of the copyright is enhanced. 
5 Furthermore, the client apparatus 110, since its internal distribution 
method determination unit 1410 is capable of determining the 
distribution method of a content key and content use conditions, it is 
possible for the client apparatus 110 to freely obtain a content key 
and content use conditions which are distributed by a different 

io distribution method for each content. Therefore, it becomes 
possible to use a desired content without any problems. 

In addition, the content distribution management server 121, 
the multicast distribution server 122, the unicast distribution server 
123, the encrypted content distribution server 124, and the user 

15 management server 120 may not be independent servers, and thus 
one server may serve for a function of the other servers. 

Also, the distributions by the multicast do not have to be 
carried out every day. 

The parameter which determines a distribution method of a 

20 content key may be the average rate of CBR and VBR, a content 
holder ID, content use conditions, and the like in addition to a 
compression format of a content. 

Furthermore, as a method of choosing a parameter to 
determine a distribution method of a content key, the content holder 

25 may indicate a parameter to the content distribution management 
server 121 when registering the content or a parameter may be 
determined dynamically by the content distribution management 
server 121 depending on the processing loads on each server in the 
content distribution system 200. 

30 As a method of obtaining an encrypted content, the 

distributions such as a distribution by media, and a distribution by 
broadcasting may be used. 
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In the above-mentioned present embodiment, the client 
apparatus 110 judges a distribution method of a content key by 
requesting a distribution of a desired content to the encrypted 
content distribution server 124. More specifically, while the 
5 content key and content use conditions distributed by the multicast 
are superimposed on the content distributed only by the multicast 
distribution server 122, the present invention is not limited to this. 
For example, the client apparatus 110 may determine the 
distribution method of a content key by reading information 

10 superimposed on the content. In other words, information 
indicating the distribution method of a content key and content use 
conditions may be superimposed on the content, instead of the 
content key and content use conditions themselves. FIG. 17 is a 
diagram showing an example of a data structure of the content on 

15 which information indicating the distribution method of the content 
key and content use conditions is superimposed. As shown in the 
diagram, information indicating the distribution method of a content 
ID, a content key, and content use conditions is superimposed on the 
encrypted content data. 

20 Here, the content distribution management server 121, after 

determining a distribution method of a content key and content use 
conditions of each content, superimposes information indicating the 
determined distribution method on each content and registers at the 
encrypted content distribution server 124. Consequently, all 

25 contents are distributed from the encrypted content distribution 
server 124 regardless of their distribution methods of the content 
keys and content use conditions. Also, the content distribution 
server 121, after determining a distribution method of a content key 
and content use conditions, registers the content key and content 

30 use conditions at the unicast distribution server 123 and the 
multicast distribution server 122 according to the determined 
distribution method. 
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In response to this, the client apparatus 110 firstly obtains an 
encrypted content from the encrypted content distribution server 
124 when its user tries to use the content. Then, the distribution 
method determination unit 1410 judges a distribution method of the 
5 content key and content use conditions by the information 
superimposed on the obtained encrypted content, and obtains the 
content key and content use conditions from the corresponding 
server according to the result of the judgement. That is, in the case 
of where the distribution method of a content key and content use 

10 conditions is determined as the multicast, the client apparatus 110 
waits for the content key and content use conditions to be 
distributed from the multicast distribution server 122, and in the 
case where the distribution method of a content key and content use 
conditions is determined as the unicast, the client apparatus 110 

15 requests a distribution of the content key and content use conditions 
to the unicast distribution server 123. The following reproduction 
process of a content of the client apparatus 110 is as explained 
already in FIG. 16. 

Further, the client apparatus 110 may obtain information to 

20 identify the distribution method of a content key and content use 
conditions from a server. Specifically, the client apparatus 110, in 
the process at the step S1303 shown in FIG. 14, requests 
information relating to the content to the content distribution 
management server 121. The content distribution management 

25 server 121 responds to the request of the client apparatus 110, 
reads out the data (information relating to the content) shown in FIG. 
4 from the content distribution method management DB 141, and 
sends it to the client apparatus 110. The client apparatus 110, 
referring to the information relating to the content obtained by the 

30 content distribution management server 121, judges the 
distribution method of the content key, and obtains the content key 
and content use conditions from the server which corresponding to 
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the determined distribution method. 

According to this method, the client apparatus 110 does not 
need to obtain a content before getting its content key and content 
use conditions; the client apparatus 110 can use the content freely 
5 even if it obtained the content after obtaining the content key and 
content use conditions. 

Regardless of a distribution method of a content key, all 
encrypted contents having the data structure shown in FIG. 8A may 
be managed and distributed by the encrypted content distribution 

10 server 124. Of course, as same as the above-mentioned present 
embodiment, only content whose content key is distributed by the 
unicast may have the data structure shown in FIG. 8A and 
distributed by the encrypted content distribution server 124; and 
content whose content key is distributed by the .multicast may have 

15 the data structure shown in FIG. 8B and may be distributed by the 
multicast distribution server 122. Moreover, although the 
processing load on the unicast distribution server 123 becomes 
bigger, by eliminating the encrypted content distribution server 124, 
the unicast distribution server 123 and the multicast distribution 

20 server 122 may distribute content with the data structure shown in 
FIG. 8B instead. 

In addition, the content distribution management server 121 
does not need to send the listed information relating to the content 
as shown in FIG. 4 as it is at a request by the client apparatus 110. 

25 For example, the client apparatus 110 may inquire about a 
distribution of a content key and content use conditions for every 
content to use. In response to this, the content distribution 
management server 121 may sends a reply about the distribution 
method of the content key and content use conditions of only 

30 content about which an inquiry was made. Consequently, while the 
processing load on the content distribution management server 
increases, the processing load on the client apparatus 110 when 
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judging the distribution method is reduced. 

Further, instead of the content distribution management 
server 121 sending information relating to the content responding to 
a request by the client apparatus 110, the information relating to 
5 the content may be distributed to the client apparatus 110 in 
advance by broadcasting, the multicast or the like. 

The client apparatus of the present invention is useful as a 
content reproduction apparatus with a communication function, a 
personal computer, a PDA (Personal Digital Assistant), a cellular 
10 phone, an STB (Set Top Box), and the like. 



15 



20 



25 



30 



-30- 



